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IN THE CLAIMS 
Please amend the claims as shown below: 
Claims 1-23 (Cancelled) 



24. (New) A system for providing service attribute information comprising: 
a directory server comprising a hierarchical data store associating a 

plurality of target entries with sen/ice attributes, said hierarchical data store 

comprising an organization level and a managed role level and further 

comprising attribute templates defined with respect to services and levels; 

in response to a query for a predefined service attribute associated with 

one of said plurality of target entries, an application for designating said 

predefined service attribute; and 

wherein said directory server, in response to said designating, searching 

said hierarchical data store for target entries that comprise said predefined 

service attribute. 



25. (New) The system as recited in Claim 24 wherein said predefined service 
attribute is associated with a role comprising one or more service attribute. 



26. (New) The system as recited in Claim 25 wherein said predefined service 
attribute is associated with said managed role associated with an organization of 
said organization level. 
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27. (New) The system as recited in Claim 24 wherein said attribute templates 
comprise: 

a first template defined with respect to a first service and a first managed 
role; and 

a second template defined with respect to said first service and a second 
managed role. 

28. (New) The system as recited in Claim 24 wherein said attribute templates 
further comprise a third template defined with respect to a second service and 
said first managed role. 

29. (New) The system as recited in Claim 24 wherein said predefined attribute 
is nsRoleDN. 

30. (New) The system as recited in Claim 24 wherein said directory server 
assigns said distinguished name of said managed role to said predefined service 
attribute if said one of said plurality of target entries belongs to said managed 
role. 
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31 . (New) A method for searching a tree structured hierarchical directory 
server, said directory server comprising a plurality of entries comprising at least 
one role, said role for grouping said plurality of entries comprising: 

accessing a first role associated with one or more of said plurality of 
entries wherein said first role comprises a first identifiable attribute and a first 
distinguished name; 

accessing a second role associated with one or more of said plurality of 
entries wherein said second role comprises a second identifiable attribute and a 
second distinguished name; 

determining if one or more of said plurality of entries comprises said first 
identifiable attribute and said second identifiable attribute; and 

creating a third role comprising said first identifiable attribute and said 
second identifiable attribute. 

32. (New) The method as recited in Claim 31 further comprising: 

creating a nested role by encapsulating said first distinguished name and 
said second distinguished name wherein said nested role comprises said first 
identifiable attribute and said second identifiable attribute and can be associated 
with one or more of said plurality of entries. 

33. (New) The method as recited in Claim 32 further comprising: 
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encapsulating said first identifiable attribute and said second identifiable 
attribute into a third distinguished name. 

34. (New) The method as recited in Claim 33 wherein said third distinguished 
name is nsRoleDN. 

35. (New) The method as recited in Claim 31 wherein said first role is a 
dynamic role and wherein said first identifiable attribute is computed at the time 
of accessing said first role. 

36. (New) The method as recited in Claim 31 wherein said first role is an 
enumerated role. 

37. (New) The method as recited in Claim 31 wherein said first role is a 
filtered role. 

38. (New) The method as recited in Claim 31 wherein said first role is a 
nested role. 

39. (New) A computer readable medium comprising instructions, that when 
executed, perform a method for searching a tree structured hierarchical directory 
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server, said directory server comprising a plurality of entries comprising at least 
one role, said role for grouping said plurality of entries, said method comprising: 

accessing a first role associated with one or more of said plurality of 
entries wherein said first role comprises a first identifiable attribute and a first 
distinguished name; 

accessing a second role associated with one or more of said plurality of 
entries wherein said second role comprises a second identifiable attribute and a 
second distinguished name; and 

determining if one or more of said plurality of entries comprises said first 
identifiable attribute and said second identifiable attribute. 



40. (New) The computer readable medium as recited in Claim 39 further 
comprising instructions for: 

creating a nested role by encapsulating said first distinguished name and 
said second distinguished name wherein said nested role comprises said first 
identifiable attribute and said second identifiable attribute and can be associated 
with one or more of said plurality of entries. 



41 . (New) The computer readable medium as recited in Claim 40 further 
comprising instructions for: 

encapsulating said first identifiable attribute and said second identifiable 
attribute into a third distinguished name. 
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42. (New) The computer readable medium as recited in Claim 41 wherein said 
third distinguished name is nsRoleDN. 



43. (New) The computer readable medium as recited in Claim 39 wherein said 
first role is a dynamic role and wherein said first Identifiable attribute is computed 
at the time of accessing said first role. 



44. (New) The computer readable medium as recited in Claim 39 wherein said 
first role is an enumerated role. 



45. (New) The computer readable medium as recited in Claim 39 wherein said 
first role is a filtered role. 



46. (New) The computer readable medium as recited in Claim 39 wherein said 
first role is a nested role. 
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